Every term the site uses, in plain English, each linked to the chapter that explains it properly. Type in the box to filter; it searches the definitions too, so "relay" finds DERP and TURN. Below the list: the address ranges and port numbers worth knowing by heart.
Common mix-up: a MAC address and an IP address do different jobs. The MAC address gets a frame across one local link and is replaced at every router. The IP address names the final destination and stays the same end to end (unless NAT rewrites it). Your laptop's IP changes when you move to a new network; its MAC normally doesn't.
If an address falls in one of these blocks, it tells you something before you look anything up.
| Block | What it is | Defined in |
|---|---|---|
| 10.0.0.0/8 | Private: 16,777,216 addresses, common in offices and VPNs | RFC 1918 |
| 172.16.0.0/12 | Private: 172.16.0.0 to 172.31.255.255; Docker and Hyper-V like it | RFC 1918 |
| 192.168.0.0/16 | Private: the home-router favorite | RFC 1918 |
| 100.64.0.0/10 | Shared address space for carrier-grade NAT; Tailscale also uses it for tailnet addresses | RFC 6598 |
| 169.254.0.0/16 | IPv4 link-local: self-assigned when DHCP fails | RFC 3927 |
| 127.0.0.0/8 | Loopback: the machine itself (127.0.0.1) | RFC 1122 |
| 192.0.2.0/24 198.51.100.0/24 203.0.113.0/24 | Documentation only: never routed, safe in examples. Every "public" address on this site comes from here. | RFC 5737 |
| fe80::/10 | IPv6 link-local: every IPv6 interface has one | RFC 4291 |
| fc00::/7 | IPv6 unique local addresses, the rough equivalent of private ranges | RFC 4193 |
| 2001:db8::/32 | IPv6 documentation prefix | RFC 3849 |
| Port | Protocol | Used by |
|---|---|---|
| 22 | TCP | SSH, remote shell and file copy |
| 53 | UDP, TCP | DNS |
| 67 / 68 | UDP | DHCP server / client |
| 80 / 443 | TCP (443 also UDP for HTTP/3) | HTTP / HTTPS |
| 123 | UDP | NTP, time sync |
| 179 | TCP | BGP sessions between routers |
| 1900 | UDP | SSDP, the discovery half of UPnP |
| 3389 | TCP, UDP | Remote Desktop (RDP) |
| 3478 | UDP, TCP | STUN and TURN |
| 5351 | UDP | NAT-PMP and PCP, sent to the gateway |
| 41641 | UDP | Tailscale's default WireGuard port |
| 49152–65535 | TCP, UDP | IANA's dynamic (ephemeral) range |